Release Notes: This patch is relative to the OpenSSH (portable) snapshot 20020925. There are major changes in the SRP patch. You no longer need to configure --with-srp, and all conditionals have been removed. If you don't want SRP, don't apply the patch (you can still disable SRP through the config file). This release works in privsep mode.

Release Notes: This patch is relative to the OpenSSH (portable) 20020402 snapshot. Prime moduli less than 1024 bits are now deprecated and have been removed from the default configuration file, but may still be used. Several new safe primes with long bit-lengths were added, bringing the total to 228 (you can still generate your own, of course). A pathname bug preventing the verifier.conf file from being found was also fixed.

Release Notes: This patch is relative to the OpenSSH (portable) 20020307 snapshot, which contains a fix for a locally exploitable off-by-one bug. This patch also applies cleanly to openssh-3.1p1, the most recent release of the portable version of OpenSSH.